@spacefast/common 0.0.11 → 0.0.13

package/dist/contracts/features.js

@@ -1,42 +1,11 @@
 import { z } from "zod";
+import { FEATURE_RUNTIME_DEFINITIONS, FEATURE_RUNTIME_KEYS, } from "./feature-lifecycle.js";
 // Spec plan vocabulary (internal-docs/platform.md "Plans And Limits").
 // `enterprise` and `internal` are named plans without self-serve pricing.
 export const PLAN_CODES = ["free", "personal", "work", "enterprise", "internal"];
 export const planCodeSchema = z.enum(PLAN_CODES).describe("Plan code.");
 export const DEFAULT_PLAN_CODE = "free";
-export const FEATURE_KEYS = [
-    "plans.paid.available",
-    "anonymous.publishing",
-    "beta.enrollment_gate",
-    "domains.search",
-    "domains.registration",
-    "domains.dns_management",
-    "domains.wpcom_dns",
-    "domains.domain_connect",
-    "domains.proxy_bindings",
-    "collab.preview_loader",
-    "collab.comments",
-    "collab.anonymous_commenters",
-    "collab.cli",
-    "collab.notices",
-    "collab.published_comments",
-    "collab.drawing",
-    "sites.dedicated_runtime",
-    "shelf",
-    "tags",
-    "zero",
-    // Access product phases (access-plan §7, X-42): every phase ships behind its
-    // own dot-namespaced key, born internal-only. The lifecycle registry
-    // (stage/docsSlug per internal-docs/feature-lifecycle-plan.html) is not
-    // implemented yet — these use the existing FeatureDefinition shape with
-    // internal-only defaults until it lands.
-    "access.share_links",
-    "access.invites",
-    "access.firewall_card",
-    "access.sso_connections",
-    "access.byo_issuers",
-    "access.views_panel",
-];
+export const FEATURE_KEYS = FEATURE_RUNTIME_KEYS;
 export const featureKeySchema = z.enum(FEATURE_KEYS).describe("Feature flag key.");
 // Feature override states (env `SPACEFAST_FLAG_*` and the feature_overrides
 // table). `kill_switch` short-circuits every other resolution layer.
@@ -54,7 +23,6 @@ export const planLimitsSchema = z
     teamMembers: planLimitValueSchema,
     subTeams: planLimitValueSchema,
     externalDomainGroups: planLimitValueSchema,
-    publicImmutableVersionWindowDays: planLimitValueSchema,
     // Version retention (charter arbitration A3, internal plan data — never on
     // the PlanPolicyResponse wire shape): `versionRetentionDays` is the included
     // full-retention window; after it versions stay stored but gated until
@@ -79,12 +47,7 @@ export const planLimitsSchema = z
     // Queryable analytics history window. Storage retains rollups for everyone
     // (env-bounded); this only clamps how far back the analytics API serves.
     analyticsRetentionDays: planLimitValueSchema,
-    // Access-surface abuse ceilings (access-plan §5.1, X-40): generous by
-    // default, enterprise unlimited — never upsell levers. Per-plan tightening
-    // (if ever) happens here, never as constants in route code.
-    // Cloud-lane rules per space (incl. TTL'd blocks; managed blocks excluded
-    // from the count).
-    cloudRulesPerSpace: planLimitValueSchema,
+    // Access-surface abuse ceilings: generous by default, enterprise unlimited.
     // Active (non-revoked, non-expired) share links per space.
     shareLinksPerSpace: planLimitValueSchema,
     // Active invites per space (§5.3 — enforced when invites land).
@@ -94,12 +57,6 @@ export const planLimitsSchema = z
     inviteEmailsPerAccountDaily: planLimitValueSchema,
     // Pending access requests per space (§5.4).
     pendingAccessRequestsPerSpace: planLimitValueSchema,
-    // Service tokens per team (§5.5).
-    serviceTokensPerTeam: planLimitValueSchema,
-    // OIDC + external issuer connections per team (§6).
-    connectionsPerTeam: planLimitValueSchema,
-    // Team-default rules (X-24).
-    teamDefaultRules: planLimitValueSchema,
 })
     .describe("Named plan limit table.");
 // Resolved team entitlements: plan limits after add-on grants plus the
@@ -109,9 +66,6 @@ export const teamEntitlementsSchema = z
     .object({
     planCode: planCodeSchema,
     limits: planLimitsSchema,
-    headersBasicAuth: z
-        .boolean()
-        .describe("Whether `_headers` Basic-Auth rules compile on this plan."),
     externalProxy: z.boolean().describe("Whether external proxy upstreams compile on this plan."),
     dedicatedRuntime: z.boolean().describe("Whether the team can use dedicated runtime sites."),
     pagesTemplates: z
@@ -150,7 +104,6 @@ const UNLIMITED_LIMITS = {
     teamMembers: "unlimited",
     subTeams: "unlimited",
     externalDomainGroups: "unlimited",
-    publicImmutableVersionWindowDays: "unlimited",
     versionRetentionDays: "unlimited",
     versionGatedKeepDays: "unlimited",
     egressBytesPerDay: "unlimited",
@@ -161,29 +114,21 @@ const UNLIMITED_LIMITS = {
     buildAccessLogRetentionHours: "unlimited",
     buildsDeploysMonthly: "unlimited",
     analyticsRetentionDays: "unlimited",
-    cloudRulesPerSpace: "unlimited",
     shareLinksPerSpace: "unlimited",
     invitesPerSpace: "unlimited",
     inviteEmailsPerSpaceDaily: "unlimited",
     inviteEmailsPerAccountDaily: "unlimited",
     pendingAccessRequestsPerSpace: "unlimited",
-    serviceTokensPerTeam: "unlimited",
-    connectionsPerTeam: "unlimited",
-    teamDefaultRules: "unlimited",
 };
 // The §5.1 access abuse-ceiling table (X-40): applied verbatim to every
 // self-serve plan; enterprise/internal stay unlimited. These sit far above
 // honest use — they are abuse ceilings, not upsell levers.
 const ACCESS_QUOTA_DEFAULTS = {
-    cloudRulesPerSpace: 200,
     shareLinksPerSpace: 100,
     invitesPerSpace: 500,
     inviteEmailsPerSpaceDaily: 200,
     inviteEmailsPerAccountDaily: 500,
     pendingAccessRequestsPerSpace: 100,
-    serviceTokensPerTeam: 50,
-    connectionsPerTeam: 10,
-    teamDefaultRules: 50,
 };
 export const PLAN_DEFINITIONS = {
     free: {
@@ -195,7 +140,6 @@ export const PLAN_DEFINITIONS = {
             teamMembers: 3,
             subTeams: 0,
             externalDomainGroups: 3,
-            publicImmutableVersionWindowDays: 7,
             versionRetentionDays: 30, // included full-retention window (charter A3)
             versionGatedKeepDays: 183, // kept gated ~6 months from readyAt, then deleted
             egressBytesPerDay: 100 * GB, // = worst-case ceiling; tunable per plan
@@ -208,7 +152,6 @@ export const PLAN_DEFINITIONS = {
             analyticsRetentionDays: 30,
             ...ACCESS_QUOTA_DEFAULTS,
         },
-        headersBasicAuth: false,
         externalProxy: false,
         dedicatedRuntime: false,
         pagesTemplates: false,
@@ -234,7 +177,6 @@ export const PLAN_DEFINITIONS = {
             analyticsRetentionDays: 365,
             ...ACCESS_QUOTA_DEFAULTS,
         },
-        headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: false,
         pagesTemplates: true,
@@ -256,7 +198,6 @@ export const PLAN_DEFINITIONS = {
             subTeams: 0,
             ...ACCESS_QUOTA_DEFAULTS,
         },
-        headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: false,
         pagesTemplates: true,
@@ -270,7 +211,6 @@ export const PLAN_DEFINITIONS = {
         name: "Enterprise",
         monthlyPriceUsd: null,
         limits: { ...UNLIMITED_LIMITS },
-        headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: true,
         pagesTemplates: true,
@@ -283,7 +223,6 @@ export const PLAN_DEFINITIONS = {
         name: "Internal",
         monthlyPriceUsd: null,
         limits: { ...UNLIMITED_LIMITS },
-        headersBasicAuth: true,
         externalProxy: true,
         dedicatedRuntime: true,
         pagesTemplates: true,
@@ -292,245 +231,7 @@ export const PLAN_DEFINITIONS = {
         analyticsHourlyGranularity: true,
     },
 };
-export const FEATURE_DEFINITIONS = {
-    "plans.paid.available": {
-        key: "plans.paid.available",
-        name: "Paid plans available",
-        description: "Controls whether paid plan upgrade and management surfaces are available.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "anonymous.publishing": {
-        key: "anonymous.publishing",
-        name: "Anonymous publishing",
-        description: "Allows unauthenticated space creation and publishing.",
-        defaultEnabled: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    // Flipped in prod via env (`SPACEFAST_FLAG_BETA_ENROLLMENT_GATE`), so launch
-    // day is an env flip, not a deploy — exact precedent of anonymous.publishing.
-    "beta.enrollment_gate": {
-        key: "beta.enrollment_gate",
-        name: "Beta enrollment gate",
-        description: "Gates the whole API behind private-beta enrollment; non-enrolled credentials get 403 not_enrolled.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.search": {
-        key: "domains.search",
-        name: "Domain search",
-        description: "Allows domain availability search and suggestion surfaces.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.registration": {
-        key: "domains.registration",
-        name: "Domain registration",
-        description: "Allows domain registration, purchase, and transfer-in surfaces.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.dns_management": {
-        key: "domains.dns_management",
-        name: "DNS management",
-        description: "Allows customer DNS zone, nameserver, and record-management surfaces.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.wpcom_dns": {
-        key: "domains.wpcom_dns",
-        name: "WordPress.com DNS automation",
-        description: "Manage a domain's DNS through the owner's WordPress.com account.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.domain_connect": {
-        key: "domains.domain_connect",
-        name: "Domain Connect",
-        description: "One-click DNS setup at providers that implement Domain Connect.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "domains.proxy_bindings": {
-        key: "domains.proxy_bindings",
-        name: "Domain proxy bindings",
-        description: "Allow a team to proxy custom-domain traffic to an external HTTP upstream.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {
-            internal: true,
-        },
-    },
-    "collab.preview_loader": {
-        key: "collab.preview_loader",
-        name: "Collab preview loader",
-        description: "Allows immutable version URLs to receive a no-secret preview overlay configuration.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.comments": {
-        key: "collab.comments",
-        name: "Comments",
-        description: "Enables Cast-backed comments on eligible immutable version URLs.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.anonymous_commenters": {
-        key: "collab.anonymous_commenters",
-        name: "Anonymous commenters",
-        description: "Allows anyone with the link to comment when space policy allows it.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.cli": {
-        key: "collab.cli",
-        name: "Comments CLI access",
-        description: "Enables scriptable comment read, export, reply, and archive operations.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.notices": {
-        key: "collab.notices",
-        name: "Realtime notices",
-        description: "Reserved kill-switch for future realtime preview notices.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.published_comments": {
-        key: "collab.published_comments",
-        name: "Published host comments",
-        description: "Allows the Collab overlay to mount comments on a space's live/published host, not just immutable preview URLs.",
-        defaultEnabled: false,
-        // ON in local dev so the Spacefast-native published path is exercised end-to-end
-        // alongside collab.comments (which already defaults on in dev).
-        // Production stays gated behind the per-space toggle.
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "collab.drawing": {
-        key: "collab.drawing",
-        name: "Collab drawing",
-        description: "Enables drawing feedback in the Collab overlay.",
-        defaultEnabled: true,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "sites.dedicated_runtime": {
-        key: "sites.dedicated_runtime",
-        name: "Dedicated runtime sites",
-        description: "Allows teams to create dedicated WP.Cloud sites and place team spaces on them.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    shelf: {
-        key: "shelf",
-        name: "Shelf",
-        description: "Exposes the per-user artifact shelf: dashboard curation and public /shelf/{handle} pages.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    tags: {
-        key: "tags",
-        name: "Spacefast Tag Manager",
-        description: "Enables Spacefast Tag Manager command surfaces, SDK configuration, and governed tag workflows.",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    zero: {
-        key: "zero",
-        name: "Spacefast Zero",
-        description: "Enables Spacefast Zero command surfaces and hosted Zero app workflows.",
-        defaultEnabled: false,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    // Access product phases (access-plan §7, X-42). Shipped surfaces default on;
-    // later-stage identity-provider pieces stay override-gated until they are
-    // ready for the main product path. When the lifecycle registry (stage +
-    // docsSlug, internal-docs/feature-lifecycle-plan.html) lands, these migrate
-    // onto it.
-    "access.share_links": {
-        key: "access.share_links",
-        name: "Share links",
-        description: "Enables the Share modal's sharing projection, the general-access selector, and share-link create/copy/revoke (access-plan §5.1/§5.2).",
-        defaultEnabled: true,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "access.invites": {
-        key: "access.invites",
-        name: "Space invites",
-        description: "Enables account-less viewer invites with magic-link accept and the request-access loop (access-plan §5.3/§5.4).",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "access.firewall_card": {
-        key: "access.firewall_card",
-        name: "Firewall card",
-        description: "Enables the managed firewall block card (country/IP/bot rules) in space access settings (access-plan §5.6).",
-        defaultEnabled: true,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "access.sso_connections": {
-        key: "access.sso_connections",
-        name: "Company SSO connections",
-        description: "Enables team-level OIDC connections minted at the authorize endpoint (access-plan §6.2, X-18).",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "access.byo_issuers": {
-        key: "access.byo_issuers",
-        name: "Bring-your-own issuers",
-        description: "Enables owner-held external token issuers with ext:-namespace binding (access-plan §6.3, X-19).",
-        defaultEnabled: false,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-    "access.views_panel": {
-        key: "access.views_panel",
-        name: "Views panel",
-        description: "Enables the identified who-viewed-what panel riding the analytics tiers (access-plan §5.6b, X-28).",
-        defaultEnabled: true,
-        enabledInDevelopment: true,
-        enabledForA8c: true,
-        planDefaults: {},
-    },
-};
+export const FEATURE_DEFINITIONS = FEATURE_RUNTIME_DEFINITIONS;
 export const featureStateSourceSchema = z
     .enum(["kill_switch", "env", "override", "default"])
     .describe("Layer that decided the flag: kill_switch (emergency off), env (SPACEFAST_FLAG_* variable), " +